Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 42 guests and 2 members online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Password Strength Testing
EH-Net
May 21, 2013, 09:00:23 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Password Strength Testing  (Read 1863 times)
0 Members and 1 Guest are viewing this topic.
cb122
Newbie
*
Offline Offline

Posts: 20


View Profile
« on: January 15, 2013, 08:14:33 AM »

Hi,

First off, please excuse the naivety of this question, but pen test isn't an area of expertise. However, my question is, are you aware of any free tools (ideally that dont need installing on a system - so command prompt applications) whereby I need to check a list of domain usernames against a list of 3 passwords to get some of the report of any accounts whose password is one of my list of 3.

I know you can dump hashes from domain controllers with pwdump etc and check them offline with tools like Cain and Ophcrack but I dont really want to do that as the scope is to just test a pre-defined set of accounts, not the capacity to check every account.

Any free little command line tools that can help and I can download for free would be excellent.
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #1 on: January 15, 2013, 09:13:48 AM »

Hashcat is command line http://hashcat.net/hashcat/

If you want something short and sweet you can use python and py2exe it. Just add a for loop to this:

import hashlib,binascii
hash = hashlib.new('md4', "thisismyhashvalue".encode('utf-16le')).digest()
print binascii.hexlify(hash)
Logged

ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #2 on: January 15, 2013, 10:27:48 PM »

Hashcat is command line http://hashcat.net/hashcat/

If you want something short and sweet you can use python and py2exe it. Just add a for loop to this:

import hashlib,binascii
hash = hashlib.new('md4', "thisismyhashvalue".encode('utf-16le')).digest()
print binascii.hexlify(hash)

Wow, it's difficult to follow that up with a response that doesn't make you look like a noob...

I was just going to say, since you're only checking three passwords, it might be easiest to perform an online SMB-based attack using something like Hydra or Medusa. The performance gains of dumping the hashes and running an offline attack would probably be negligible with so few passwords.

You could run that from a Linux VM and not be required to install anything anywhere in a host system. You would have to be careful about account lockout though. If you're using the common threshold of three invalid login attempts, either bump that up a bit or space out the guesses a little.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
cb122
Newbie
*
Offline Offline

Posts: 20


View Profile
« Reply #3 on: January 16, 2013, 04:23:08 AM »

Hashcat is command line http://hashcat.net/hashcat/

If you want something short and sweet you can use python and py2exe it. Just add a for loop to this:

import hashlib,binascii
hash = hashlib.new('md4', "thisismyhashvalue".encode('utf-16le')).digest()
print binascii.hexlify(hash)

Many thanks. If say you had to audit a number of domain users, and you no account lockout is in operation, what password rules/values would you try? Password=Username is an obvious one, but what would your strategy be?
Logged
cd1zz
Hero Member
*****
Offline Offline

Posts: 561


View Profile WWW
« Reply #4 on: January 16, 2013, 08:21:30 AM »

If you only have three tries, trim this list down:

password
Password1
Companyname1
Currentmonth2013 (or 2012)
Currentseason2013 (or 2012)
Logged

cb122
Newbie
*
Offline Offline

Posts: 20


View Profile
« Reply #5 on: January 16, 2013, 08:59:24 AM »

Thank you for your help its appreciated.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.07 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.